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^U^of^dairns replaces al. prior versions, and Ksungs, of da™ . <he 

application: 

, rOnginal] A oerhod of providing dynamic QuaHey of Service (QoS) treatmen, of 
' La iraffic within a secore Virtua! Private Nenvork (VPN) tunnel, the »e<hod 

comprising the steps of: 

querying a policy database to obtain QoS information concerning a desired QoS 

treatment for data traffic within the VPN tunnel; 
forwarding the QoS information through the VPN tunnel to a VPN gateway at an 

opposite end of the VPN Tunnel; and 
attaching a QoS marker based on the QoS information to the data traffic within the 

VPN tunnel. 

2 [Currently Amended] A^Jhemethod as claimed in cJaim I, wherein the QoS 
information obtained from the policy database comprises the QoS marker. 

3 [Currently Amended] TheA method as claimed in claim 1. wherein the QoS 
information obtained from the policy database comprises Tspec and Rspec 
parameters indicative of the desired QoS treatment. 

4. [Currently Amended] TheA method as claimed in claim 3, wherein the step of 
attaching a QoS marker comprises the steps of: 
mapping the Tspec and Rspec parameters to the QoS marker; and 
inserting the QoS marker into a predetennined field of a header portion of the data 
traffic within the VPN tunnel. 

5 [Currently Amended] TheA method as claimed in claim 4, wherein the QoS 

marker is a Differentiated Services Code Point (DSCP) value. 
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10. 


11. 


12. 


[Currently Amended] TheA method as claimed in claim 1. therein the step of 
obtaining an indication of a QoS treatment further comprises the steps of: 
obtaining, from a customer,, an indication of a desired QoS treatment; 
confirming an availability of the desired QoS treatment; and 

if the desired QoS treatment is available, updating the policy database with 
information respecting the desired QoS treatment. 

[Currently Amended] TheA method as claimed in claim 6, wherein the step of 
confirming an availability of the desired QoS treatment comprises any one or more 
of the steps of: 

determining whether or not the VPN tunnel has sufficient available bandwidth to 

support the desired QoS; and 
comparing the desired QoS to a Service Level Agreement (SLA). 

[Currently Amended] TheA method as claimed in claim 1, wherein the step of 
querying me policy database is performed at a start of the communications session. 

[Currently Amended] TheA method as claimed in claim 8, wherein the step of 
querying the policy database is performed in response to a session initiation 
message received from the costomer. 

[Currently Amended] TheA method as claimed in claim 1, wherein the step of 
querying the policy database is performed dining the communications session. 

[Currently Amended] TheA method as claimed in claim 10, wherein the step of 
querying the policy database is performed at predetermined intervals during the 
communications session. 

[Currently Amended] TheA method as claimed in claim 10, wherein the step of 
querying the policy database is performed in response to a query request from 
either one of the customer and a service provider. 
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13. 


14. 


15. 


16. 


17. 


18. 


19. 


20. 


[Currently Amended] TheA method as claimed in claim 10, wherein the step of 
querying the policy database is performed in response to a change in the 
information respecting QoS treatment stored in the policy database. 

[Currently Amended] TheA method as claimed in claim 1, further comprising a 
step of notifying a service provider of the indicated QoS treatment. 

[Currently Amended] JheA method as claimed in claim 14, wherein the step of 
notifying the service provider is performed at a start of the communications 

session. 

[Currently Amended] TheA method as claimed in claim 14, wherein the step of 
notifying the service provider is performed in response to a change in the indicated 
QoS treatment. 

[Original] A VPN gateway adapted to provide dynamic QoS treatment of daU 
traffic within a secure VPN tunnel, the gateway comprising: 

means for querying a policy database to obtain QoS information concerning a 
desired QoS treatment for data traffic within the VPN tunnel; 

means for forwarding the QoS information through the VPN tunnel to a VPN 
gateway at an opposite end of the VPN Tunnel; and 

means for attaching a QoS marker based on the QoS information to the data traffic 
within the VPN tunnel. 

[Currently Amended] TheA VPN gateway as claimed in claim 17, wherein the 
QoS ^formation obtained from the policy database comprises the QoS marker. 

[Currently Amended] IfeeA VPN gateway as claimed in claim 17, wherein the 
QoS information obtained from the policy database comprises Tspec and Rspec 
parameters indicative of the desired QoS treatment. 

[Currently Amended] TheA VPN gateway as claimed in claim 19, wherein the 
means for attaching a QoS marker comprises: 
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21. 


22. 


23. 


24. 


25. 


26. 


27. 


means for mapping the Tspec and Rspec parameters to the QoS marker, and 
means for inserting the QoS marker into a predetermined field of a header portion 
of die data traffic within the VPN tunnel. 

[Currently Amended] TheA VPN gateway as claimed in claim 20, wherein the 
QoS marker is a Differentiated Services Code Point (DSCP) value. 

[Currently Amended] JheA VPN gateway as claimed in claim 17, further 
comprising means for receiving a QoS request message indicative of the desrred 

QoS treatment. 

[Currently Amended] TheA VPN gateway as claimed in claim 17, wherein the 
means for forwarding the QoS information througn the VPN tunnel comprises: 
a policy update message adapted to convey the QoS information through the VPN 
tunnel; and 

means for inserting the QoS information into a payload portion of the policy update 
message. 

[Currently Amended] TheA VPN gateway as claimed in claim 23, wherein the 
policy update message is an IS AKMP/IKE message having a predetermined unique 
"Next Payload" type. 

[Currently Amended] TheA VPN gateway as claimed in claim 17, wherein the 
policy database is queried at a start of the communications session- 

[Currently Amended] TheA VPN gateway as claimed in claim 25, wherein the 
means for querying the policy database is responsive to a session initiation 
message received from the customer. 

[Currently Amended] TheA . VPN gateway as claimed in claim 17, wherein the 
policy database is queried during the communications session. 
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29. 


30. 


31. 


32. 


33. 


(C^Uy A^dcd, VPN ga»wa y as * **» 


session. 


[CTOt .y tended] H* VW ^ - <*— * — 

one of the customer and a service provider. 

recently Amended] ^ VPN gateway as claimed in claim 27, wherein the 
means for queryinglhepolicy database is responsive to a change in tne informaUon 
respecting QoS treatment stored in the policy database. 

[Currently Amended] ThgA VPN gateway as claimed in claim 17, further 
comprising means for notifying a service provider of the indicated QoS treatment. 

[Currently Amended] TheA VPN gateway as claimed in claim 31, wherein the 
means for notifying the service provider is adapted to send a notification message 
to the service provider at a start of the communications session. 

[Currently Amended] TheA VPN gateway as claimed in claim 31, wherein the 
means for notifying the service provider is adapted to send a notification message 
to the service provider in response to a change in the indicated QoS treatment. 
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